NVD

Id
6890  
Name
CVE-2008-7159  
Description
The silc_asn1_encoder function in lib/silcasn1/silcasn1_encode.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.8 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted OID value, related to incorrect use of a %lu format string.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-09-10  
Modified Date
2012-10-22  
Seq
2008-7159  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
39069 6890 CVE-2008-7159 SUSE-SR:2009:016  View
39070 6890 CVE-2008-7159 http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.8  View
39071 6890 CVE-2008-7159 http://silcnet.org/general/news/news_toolkit.php  View
39072 6890 CVE-2008-7159 DSA-1879  View
39073 6890 CVE-2008-7159 MDVSA-2009:234  View
39074 6890 CVE-2008-7159 [oss-security] 20090831 CVE id request: silc-toolkit  View
39075 6890 CVE-2008-7159 [oss-security] 20090903 Re: CVE id request: silc-toolkit  View
39076 6890 CVE-2008-7159 36192  View
39077 6890 CVE-2008-7159 silctoolkit-silcasn1encoder-format-string(53477)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44700 JVNDB-2009-005707 SILC Toolkit の lib/silcasn1/silcasn1_encode.c におけるスタック領域を上書きされる脆弱性 Secure Internet Live Conferencing (SILC) Toolkit の lib/silcasn1/silcasn1_encode.c の silc_asn1_encoder 関数は、%lu フォーマットストリングの間違った使用をする不備があるため、スタック領域を上書きされる、および任意のコードを実行される脆弱性が存在します。 CVE-2008-7159 37272 CVE-2008-7159 6890 5.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005707.html 2009-09-10 2012-12-20 View